cargo vet #2204

	# Roughly based off of https://mozilla.github.io/cargo-vet/configuring-ci.html

	name: cargo vet
	on:
	- merge_group
	- push
	- pull_request

	# Only build for latest push/PR unless it's main or release/
	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: ${{ github.ref != 'refs/heads/main' && !startsWith( github.ref, 'refs/heads/release/' ) && !startsWith( github.ref, 'refs/heads/gh-readonly-queue/' ) }}

	jobs:
	cargo-vet:
	name: Vet Dependencies
	runs-on: ubuntu-latest
	# Keep version in sync with rust-toolchain.toml
	container: rust:1.81.0
	env:
	CARGO_VET_VERSION: 0.10.0
	steps:
	- uses: actions/checkout@v4
	with:
	persist-credentials: false
	- uses: actions/cache@v4
	id: cache-vet
	with:
	path: /usr/local/cargo/bin/cargo-vet
	key: cargo-vet-${{ env.CARGO_VET_VERSION }}
	- name: Install the cargo-vet binary, if needed
	if: ${{ steps.cache-vet.outputs.cache-hit != 'true' }}
	run: cargo install --version $CARGO_VET_VERSION cargo-vet
	- name: Invoke cargo-vet
	run: cargo vet --locked

Provide feedback